CVE-2018-3974

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory

Critical · published April 2, 2019

CVSS v3.0
9.3
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00530 · 43.7th percentile
Published
2019-04-02T15:19Z
EPSS history
Timeline
  • 02 APR 15:19Z
    An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory
    cvelistv5